PluginExec
PluginName
PluginType
Behavioral task
behavioral1
Sample
SecuriteInfo.com.BScope.Backdoor.Bifrose.3179.10046.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.BScope.Backdoor.Bifrose.3179.10046.dll
Resource
win10v2004-20230703-en
Target
SecuriteInfo.com.BScope.Backdoor.Bifrose.3179.10046.dll
Size
1.3MB
MD5
959f8c102c3fdf3833661f5e6069c42a
SHA1
3c1671eea69037a1c402b0fb1bd8f5535238198d
SHA256
1c425c04d55bdea48e0fe6e8b066fac7f2cab6ef6a36daeee0e4fd4abd57528b
SHA512
0e5d58d6f9957413b0c09566547841bd55452eac2919403280cc9ca978e029a7e1746e1e7471f2825d6eee6b0feb7990fe3feb629ecead42876ec6765f59dc35
SSDEEP
24576:GLc/A9JMCu3g8+ruf8Nf7cojcP7odk0+p/8W69fmZpb7ZTOay6WPCVBzo:BA9JvuQZrO8t7PAPCkFp/J69SP5apizo
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
SecuriteInfo.com.BScope.Backdoor.Bifrose.3179.10046.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PluginExec
PluginName
PluginType
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE